Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
File: AYGCKpyioAj1zRG5-duhbuLGFFk.mft (raw, json)
Hash identifier: daRu5hwsXtyU5lJKrYcycGTagk3O8aCMGiLQtBNtXB4=
Subject key identifier: 11:EA:08:2F:7D:8C:11:52:2C:93:3E:EC:E5:5F:41:0E:74:90:36:9D
Authority key identifier: 01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
Certificate issuer: /CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Certificate serial: 01A08AC33205BE7115856C1DBC58282B83BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
Manifest number: 058D
Signing time: Thu 10 Sep 2026 10:00:43 +0000
Manifest this update: Thu 10 Sep 2026 10:00:43 +0000
Manifest next update: Fri 11 Sep 2026 10:00:43 +0000
Files and hashes: 1: AYGCKpyioAj1zRG5-duhbuLGFFk.crl (hash: 9iIuNfgPl1IlEUulH75ZIQWFWGApw2vHNzppb4LDP+s=)
2: Ys_4DR1wULGBNA_eDYgXZEWOD2Q.roa (hash: qjKc7M+pEY0qhXBmrNC0EBe740v+5vXbrYaxAIWy74Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:32:05:be:71:15:85:6c:1d:bc:58:28:2b:83:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0181822a9ca2a008f5cd11b9f9dba16ee2c61459
Validity
Not Before: Sep 10 10:00:43 2026 GMT
Not After : Sep 11 10:00:43 2026 GMT
Subject: CN=11ea082f7d8c11522c933eece55f410e7490369d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b4:5c:6a:76:7e:52:41:92:1f:b1:ec:7d:33:
8c:6a:b2:06:38:bf:61:91:fc:cc:c8:d5:e9:84:c0:
ba:24:ac:c4:fa:f2:d2:25:56:13:9c:c1:b6:aa:39:
11:b9:1c:28:72:d7:4a:7c:82:2d:23:34:a5:9e:8e:
a3:10:f8:e6:a2:f8:26:d4:6b:46:09:41:10:28:af:
04:79:cc:00:ec:63:11:35:79:81:aa:fc:28:bc:d8:
18:f1:e9:7d:45:ed:c0:94:db:1e:6c:97:2d:f4:78:
7a:a6:32:7e:42:60:17:af:ed:23:a0:9d:78:9a:f1:
63:d8:fb:7b:41:7b:e2:b6:e8:5e:b1:fd:29:e6:c0:
42:60:b6:f7:7c:0c:10:93:87:4a:e3:b1:55:28:03:
1e:4f:7a:3f:f3:68:fe:67:78:61:af:4c:04:8a:4c:
c9:e3:a2:f7:c5:cd:0c:a6:3c:49:e3:8a:7b:73:02:
3e:d6:16:f3:3c:22:68:fd:58:92:44:00:3b:da:06:
87:77:6c:fa:b9:93:25:29:d8:eb:8f:02:65:bf:5f:
7b:cf:b6:d3:83:be:0f:c1:3d:39:d2:89:14:a9:77:
7f:44:08:33:7f:1a:73:b3:63:28:02:02:1e:d4:81:
f4:df:3f:5a:ab:cd:7c:bc:ee:b7:91:87:58:a6:33:
31:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:EA:08:2F:7D:8C:11:52:2C:93:3E:EC:E5:5F:41:0E:74:90:36:9D
X509v3 Authority Key Identifier:
keyid:01:81:82:2A:9C:A2:A0:08:F5:CD:11:B9:F9:DB:A1:6E:E2:C6:14:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AYGCKpyioAj1zRG5-duhbuLGFFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/3e9525-a2ce-4e90-900d-80d4945911dd/1/AYGCKpyioAj1zRG5-duhbuLGFFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:52:7a:af:eb:12:7e:61:91:f9:1e:84:e2:49:85:14:47:4b:
a8:ea:f8:ae:ec:39:73:0b:d1:44:e4:10:55:e9:17:a1:f5:fd:
01:e9:78:33:6e:a5:8e:50:ae:59:fc:18:0d:99:65:c8:a7:65:
c4:94:74:33:ba:3b:59:66:f7:19:51:f0:1a:93:70:05:36:23:
1e:26:20:4f:fd:a5:be:b5:c5:33:38:c0:49:5e:cd:28:a8:f3:
45:9e:e2:37:8a:b6:11:b8:27:2b:2e:2b:fc:c2:6b:1a:a4:08:
92:c2:4a:31:0b:7a:8a:23:83:93:e5:d8:1b:2a:35:d6:18:7e:
73:a1:b9:c6:74:83:44:b6:a5:5f:a6:93:b3:d4:09:0a:7e:c2:
a4:76:75:d7:15:ec:5b:ab:6c:0b:8e:f0:56:3a:45:97:3e:59:
ff:0d:cf:ac:b7:a8:91:02:ac:21:f4:5a:12:38:35:b5:ae:3e:
3d:fe:2b:79:77:64:4a:d6:25:af:00:0e:46:a8:c1:2f:ae:16:
f9:ec:75:0a:95:d0:72:5f:ed:f4:43:e2:32:58:05:b8:db:9e:
2d:80:cf:18:db:93:7a:56:d4:df:11:12:2f:93:52:7f:a2:2c:
a2:89:5c:fe:47:95:05:09:28:57:d2:d7:2f:62:b2:de:ea:93:
aa:67:9c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:09 2026 by rpki-client